CVE-2019-12954: XSS
SolarWinds Network Performance Monitor (Orion Platform 2018, NPM 12.3, NetPath 1.1.3) allows XSS by authenticated users via a crafted onerror attribute of a VIDEO element in an action for an ALERT.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-12954?
CVE-2019-12954 is considered a medium severity vulnerability due to its potential for XSS attacks by authenticated users.
How do I fix CVE-2019-12954?
To fix CVE-2019-12954, update your SolarWinds Network Performance Monitor to the latest version provided by the vendor.
Who is affected by CVE-2019-12954?
CVE-2019-12954 affects users of SolarWinds Network Performance Monitor Orion Platform 2018, specifically version 12.3 and NetPath version 1.1.3.
What type of vulnerability is CVE-2019-12954?
CVE-2019-12954 is a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts.
Can CVE-2019-12954 be exploited remotely?
No, CVE-2019-12954 requires authenticated users to exploit the vulnerability through crafted input.